[Bug 2332] Show more secure fingerprints than MD5 (e.g. SHA256) in ssh and ssh-keygen

2015-01-08 Thread bugzilla-daemon
https://bugzilla.mindrot.org/show_bug.cgi?id=2332 Petr Lautrbach changed: What|Removed |Added CC||plaut...@redhat.com --- Comment #1 from

[Bug 2334] New: Warn when weak Ciphers are used

2015-01-08 Thread bugzilla-daemon
https://bugzilla.mindrot.org/show_bug.cgi?id=2334 Bug ID: 2334 Summary: Warn when weak Ciphers are used Product: Portable OpenSSH Version: 6.7p1 Hardware: Other OS: Linux Status: NEW Severity: enhancement

[Bug 2333] forbid old Ciphers, KexAlgorithms and MACs by default

2015-01-08 Thread bugzilla-daemon
https://bugzilla.mindrot.org/show_bug.cgi?id=2333 --- Comment #3 from kolafl...@kolahilft.de --- I don't know any halfway recent SSH implementation that shouldn't work without these. Nevertheless: What about a user-warning in interactive mode? -- You are receiving this mail because: You are wat

[Bug 2332] Show more secure fingerprints than MD5 (e.g. SHA256) in ssh and ssh-keygen

2015-01-08 Thread bugzilla-daemon
https://bugzilla.mindrot.org/show_bug.cgi?id=2332 --- Comment #2 from kolafl...@kolahilft.de --- Just tested the current version from Git. SHA256 is working great! Gives me the SHA256 or MD5 fingerprint: ssh-keygen -lv -E SHA256 -f id_rsa.pub ssh-keygen -lv -E MD5 -f id_rsa.pub But: SSH clien

[Bug 2332] Show more secure fingerprints than MD5 (e.g. SHA256) in ssh and ssh-keygen

2015-01-08 Thread bugzilla-daemon
https://bugzilla.mindrot.org/show_bug.cgi?id=2332 --- Comment #3 from Petr Lautrbach --- You can put "FingerprintHash=md5" into your ssh config files (/etc/ssh/ssh_config, ~/.ssh/config) or use '-o FingerprintHash=md5' directly on the command line. $ ssh localhost The authenticity of host 'local

[Bug 2332] Show more secure fingerprints than MD5 (e.g. SHA256) in ssh and ssh-keygen

2015-01-08 Thread bugzilla-daemon
https://bugzilla.mindrot.org/show_bug.cgi?id=2332 Damien Miller changed: What|Removed |Added CC||d...@mindrot.org --- Comment #4 from Dami

[Bug 2332] Show more secure fingerprints than MD5 (e.g. SHA256) in ssh and ssh-keygen

2015-01-08 Thread bugzilla-daemon
https://bugzilla.mindrot.org/show_bug.cgi?id=2332 --- Comment #5 from Petr Lautrbach --- ~/.ssh/config: host * FingerprintHash=md5 $ ssh -o FingerprintHash=sha512 localhost The authenticity of host 'localhost (127.0.0.1)' can't be established. ECDSA key fingerprint is MD5:da:24:43:0b:2e:c1:3

[Bug 2306] ssh-add 6.7 inserts RSA keys into the ssh-agent as "rsa w/o comment" instead of filenames

2015-01-08 Thread bugzilla-daemon
https://bugzilla.mindrot.org/show_bug.cgi?id=2306 Damien Miller changed: What|Removed |Added Resolution|--- |FIXED Status|ASSIGNED

[Bug 2266] Bugs intended to be fixed in 6.8

2015-01-08 Thread bugzilla-daemon
https://bugzilla.mindrot.org/show_bug.cgi?id=2266 Bug 2266 depends on bug 2306, which changed state. Bug 2306 Summary: ssh-add 6.7 inserts RSA keys into the ssh-agent as "rsa w/o comment" instead of filenames https://bugzilla.mindrot.org/show_bug.cgi?id=2306 What|Removed

[Bug 2332] Show more secure fingerprints than MD5 (e.g. SHA256) in ssh and ssh-keygen

2015-01-08 Thread bugzilla-daemon
https://bugzilla.mindrot.org/show_bug.cgi?id=2332 --- Comment #6 from Petr Lautrbach --- works for me with this patch: --- a/readconf.c +++ b/readconf.c @@ -1464,6 +1464,7 @@ parse_int: goto parse_string; case oFingerprintHash: + intptr = &options->fingerpr

[Bug 2332] Show more secure fingerprints than MD5 (e.g. SHA256) in ssh and ssh-keygen

2015-01-08 Thread bugzilla-daemon
https://bugzilla.mindrot.org/show_bug.cgi?id=2332 Damien Miller changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

[Bug 1768] scp: wrong error message when destination directory ends with a slash and is missing

2015-01-08 Thread bugzilla-daemon
https://bugzilla.mindrot.org/show_bug.cgi?id=1768 Jakub Jelen changed: What|Removed |Added CC||jje...@redhat.com --- Comment #2 from Jakub

[Bug 1768] scp: wrong error message when destination directory ends with a slash and is missing

2015-01-08 Thread bugzilla-daemon
https://bugzilla.mindrot.org/show_bug.cgi?id=1768 --- Comment #3 from Jakub Jelen --- Created attachment 2524 --> https://bugzilla.mindrot.org/attachment.cgi?id=2524&action=edit patch to verify this problem in regress test suite -- You are receiving this mail because: You are watching the ass

[Bug 2319] [PATCH REVIEW] U2F authentication

2015-01-08 Thread bugzilla-daemon
https://bugzilla.mindrot.org/show_bug.cgi?id=2319 Jean-Philippe Ouellet changed: What|Removed |Added CC||j...@vt.edu -- You are receiving

[Bug 2319] [PATCH REVIEW] U2F authentication

2015-01-08 Thread bugzilla-daemon
https://bugzilla.mindrot.org/show_bug.cgi?id=2319 --- Comment #6 from Michael Stapelberg --- (In reply to Damien Miller from comment #5) > (In reply to Michael Stapelberg from comment #3) > > (In reply to Damien Miller from comment #2) > > > I think it is best that you start with a description of